CVE-2021-42951

ALTO 8.8CVE-2021-42951 · Published 01/03/2022 · updated 09/07/2026

In breve

CVE-2021-42951 è una vulnerabilità ALTO (CVSS 8.8) che riguarda msol (algorithmia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.5% delle vulnerabilità.
Correzione: aggiornare a 2021-10-10 o successiva.

Package	Affected versions	Patched versions
msol algorithmia	`< 2021-10-10`	`2021-10-10`

Description

A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.

References

seclists.org/fulldisclosure/2022/Feb/33 · Mailing List

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free